Skip to main content
Question

FIleVault Key is Unknown M2 Mac

  • September 2, 2022
  • 7 replies
  • 98 views

Forum|alt.badge.img+4

Hello Everyone, i have a Problem with 2 Devices, one of them ist with the new M2 Chip and the other One is an Intel Mac. Both of them show me that in jamf:  Personal Recovery Key Validation:Unknown

But FileVault 2 Partition Encryption State:Encrypted.

I am able to see the Personal Recovery Key in terminal but there is a Problem with the transfer to Jamf. Ihad tried with jamf recon but nothink happens. Can anyone help please.

7 replies

Minerva
Forum|alt.badge.img+1
  • New Contributor
  • September 2, 2022

Decrypt and encrypt again. 


Jason33
Forum|alt.badge.img+13
  • Honored Contributor
  • September 4, 2022

On one of the systems, run a policy with the Disk Encryption payload and the Action set to "Issue new Recovery Key", and the Recovery Key type as "Individual".  As long as your initial FileVault profile/policy was set to send the keys to Jamf Pro, it should issue and escrow a new key.

There's also a Jamf script that uses the Jamf Helper to prompt the user for their password and then creates a new recovery key.  Check the script at https://github.com/jamf/FileVault2_Scripts/blob/master/reissueKey.sh and modify for your needs.  It should still work on Apple Silicon.


Forum|alt.badge.img+4

Thank you Very Much, i had tried it on the Device directly with two commands:
sudo fdesetup changerecovery -personal

and then Sudo jamf recon, it works :) 


Forum|alt.badge.img+4

i have another question, we also have a hidden Admin Account, whwhich is created during the enrollment, by some Users, i see the Admin Account as FileVault User, how can i change thhis easily ? 


Forum|alt.badge.img+1
  • New Contributor
  • November 15, 2022

i have another question, we also have a hidden Admin Account, whwhich is created during the enrollment, by some Users, i see the Admin Account as FileVault User, how can i change thhis easily ? 


Hey, can you explain how to create this hidden Admin Account?


Forum|alt.badge.img+1
  • New Contributor
  • November 15, 2022

Thank you Very Much, i had tried it on the Device directly with two commands:
sudo fdesetup changerecovery -personal

and then Sudo jamf recon, it works :) 


Also, if possible help me with that; I've tried those 2 commands, runs good, I could see the RecoveryKey on terminal but still showing as unknown on Jamf


Forum|alt.badge.img+13
  • Valued Contributor
  • September 22, 2023

Hey, can you explain how to create this hidden Admin Account?


Hi.. In the prestage..go to 'account settings'   there is a checkbox " Hide managed administrator account in Users & Groups"